https://cybertoolchain.io/tools/backslash New releases and features in Backslash, tracked by The Cyber Toolchain. en Mon, 26 Oct 2026 00:00:00 GMT https://www.backslash.security/blog/ai-plugin-security-hidden-risks https://www.backslash.security/blog/ai-plugin-security-hidden-risks Mon, 26 Oct 2026 00:00:00 GMT Backslash adds a native AI Plugin Inventory with child-component risk scoring, signature verification, and inline host-level guardrails for agentic endpoints.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Plugin Inventory (`Plugins` tab) that discovers every AI plugin installed on developer endpoints — surfacing publisher, source repository, unpacked contents, risk severity, associated agents, and last sync timestamp, fully filterable and sortable — alongside child-component risk scoring that assigns a plugin's overall severity by the highest risk found among its nested `scripts`, `MCP tools`, `hooks`, and `rules` (preventing a low-risk wrapper from concealing a critical child component), and MCP server and agent-skill mapping that ties every MCP connection and skill to its parent plugin and host agent, surfacing over-permissive tool definitions and untrusted content sources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Hooks Inventory that automatically discovers hooks across `Claude Code`, `Codex`, `Cursor`, and `Copilot`, tracking whether a hook was added by `Backslash`, a developer, or a third-party plugin, combined with deep code parsing and digital-signature validation for hook files to verify component provenance and detect unauthorized script tampering before execution, while vetting scripts against backdoor and credential-theft threat models. • Adds local model discovery on macOS and Windows model directories for runtimes such as Ollama, LM Studio, and llama.cpp, governing locally-run models under the same allow/deny controls as remote foundation models. • Adds AI Rules vetting that scans standing configuration files (`.cursorrules`, `AGENTS.md`, `CLAUDE.md`) for instruction poisoning and exposed credentials, with guardrails that automatically quarantine unsafe files at session start. • Enforces inline host-level guardrails that block unapproved command executions, credential access, and data egress before actions execute — rather than alerting after the fact. • Delivers automated audit records and host-level run tracing aligned to regulatory frameworks including EU AI Act, NIS2, DORA, and SOC, without requiring manual developer reporting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://www.backslash.security/blog/local-model-discovery-ai-governance https://www.backslash.security/blog/local-model-discovery-ai-governance Mon, 19 Oct 2026 00:00:00 GMT Backslash adds Local Model Discovery to surface shadow AI from Ollama, LM Studio, llama.cpp, and six other local runtimes on macOS and Windows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Local Model Discovery to detect AI models installed on macOS and Windows endpoints via Ollama, LM Studio, Jan, GPT4All, the Hugging Face cache, MLX, LocalAI, and llama.cpp — with no developer setup required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Surfaces local models in the existing AI inventory alongside remote models, enabling the same allow and deny list controls to be applied to endpoint-resident models. • Reports a permission gap when a model directory cannot be read, letting security teams distinguish an access limitation from an inspected directory that contained no models. • Deduplicates multiple paths pointing to the same model into a single inventory record and filters out files that merely resemble models. • Ties each discovered local model to its specific endpoint even when no AI agent is attached to it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://www.backslash.security/blog/ai-fabric-graph-agent-security-visibility https://www.backslash.security/blog/ai-fabric-graph-agent-security-visibility Tue, 13 Oct 2026 00:00:00 GMT Backslash launches AI Fabric Graph, connecting enterprise endpoints, AI agents, MCP servers, skills, and plugins in one risk-investigation view.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the AI Fabric Graph, a connected visualization that chains enterprise endpoints, AI agents, MCP servers, skills, rules, and plugins into one view with risk severity and Shadow AI indicators.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables filtering the graph for policy violations and drilling into agent-level violation details to identify the root cause and affected components. • Supports tracing a flagged asset back to every agent and endpoint connected to it, revealing shared exposure across the agentic fabric. • Allows teams to start from a component and enumerate which agents and endpoints share it, enabling scoped remediation across multiple installations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://www.backslash.security/blog/claude-code-mods-explained https://www.backslash.security/blog/claude-code-mods-explained Mon, 12 Oct 2026 00:00:00 GMT Backslash flags Claude Code mod risks: use `claude plugin validate`, `allowManagedModsOnly`, and `~/.claude/skills/` audits to govern agent plugins.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Run `claude plugin validate` on a mod's folder to list the events it hooks and the functions it calls before installing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enable `allowManagedModsOnly` in company policy so only company-deployed mods can run in Claude Code sessions on managed machines. • Audit `~/.claude/skills/` periodically — plugin folders placed there load automatically in every Claude Code session with no install step. • Use `/plugin` inside a Claude Code session, or `claude plugin list` from the shell, to enumerate all active and installed mods including those in `~/.claude/skills/`. • Backslash provides a single-pane view across developer endpoints showing every installed agent plugin, MCP server, skill, and hook alongside what each can reach and which carry risk. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://docs.backslash.security/changelog/block-mcp-action https://docs.backslash.security/changelog/block-mcp-action Thu, 23 Jul 2026 15:49:55 GMT Backslash adds a Block MCP action to control MCP activity. • New Block MCP action enables practitioners to block MCP (Model Context Protocol) actions within Backslash. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://docs.backslash.security/changelog/claude-code-support https://docs.backslash.security/changelog/claude-code-support Thu, 23 Jul 2026 15:49:55 GMT Backslash adds support for Claude Code. • Adds integration support for Claude Code. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://docs.backslash.security/changelog/notify-in-pr-event https://docs.backslash.security/changelog/notify-in-pr-event Thu, 23 Jul 2026 15:49:55 GMT Backslash adds PR event notifications to alert teams of security findings at pull request time. • New PR event notifications surface security findings directly within pull request activity. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://docs.backslash.security/changelog/remove-pr-comment-after-successful-scans https://docs.backslash.security/changelog/remove-pr-comment-after-successful-scans Thu, 23 Jul 2026 15:49:55 GMT Backslash now removes PR comments automatically after scans come back clean. • Automatically removes previously posted PR comments when a subsequent scan returns no findings, keeping pull requests free of stale security noise. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://docs.backslash.security/changelog/selected-repos-shown-in-top https://docs.backslash.security/changelog/selected-repos-shown-in-top Thu, 23 Jul 2026 15:49:55 GMT Backslash now surfaces selected repositories at the top of the repo list for faster navigation. • Selected repositories are now pinned to the top of the repository list for quick access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://www.backslash.security/blog/new-mcp-spec-opens-new-attack-surfaces https://www.backslash.security/blog/new-mcp-spec-opens-new-attack-surfaces Thu, 28 May 2026 00:00:00 GMT Backslash introduces endpoint monitoring for new MCP stateless protocol attack surfaces. • Adds visibility into `browser_id` and other handle strings passed in conversation context to detect potential hijacking. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash https://www.backslash.security/blog/ai-agent-skills-the-new-standard-for-modular-ai-workflows https://www.backslash.security/blog/ai-agent-skills-the-new-standard-for-modular-ai-workflows Wed, 15 Apr 2026 00:00:00 GMT Backslash introduces Agent Skills for modular AI workflows and a free Skills Security Scanner • Enables teams to package organizational knowledge and specialized workflows as portable `SKILL.md` files for use across Claude Code, GitHub Copilot, VS Code, and other agents. • Supports installation of skills via registry command `npx skills install <skill-name>` or by manually placing skill folders in project (`~/.github/skills/`), personal (`~/.codex/skills`), or system-level directories. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/backslash